home / writing

Writing

Engineering guides.

28 practical guides on Kubernetes, DevOps, cloud, observability, security and AI: how the pieces fit, the commands and config that matter, and the pitfalls to avoid.

Kubernetes5 min read

GitOps with Argo CD

GitOps principles, pull versus push delivery, and how Argo CD applications, sync policies, Helm and Kustomize sources, RBAC, SSO and sealed secrets work together.

Read the guide →
Kubernetes5 min read

Helm Charts Explained

A practical tour of Helm: chart structure, templates and values, dependencies, hooks, the release lifecycle, testing, and automating chart delivery in CI.

Read the guide →
Kubernetes4 min read

Kubernetes Cluster Administration

Day-two Kubernetes administration: scheduling controls, resource monitoring, kubeadm upgrades, etcd backups, RBAC, storage, networking and a troubleshooting workflow.

Read the guide →
Kubernetes5 min read

Kubernetes Networking, Scaling and Scheduling

Kubernetes Services and pod networking, ConfigMaps and Secrets, autoscaling with HPA and cluster autoscaler, advanced scheduling, security hardening and extension points.

Read the guide →
Kubernetes4 min read

What actually happens inside a Kubernetes cluster

The control plane components, what each one does, and how a single kubectl apply turns into a running container. Plus probes, rollout strategies and admission control.

Read the guide →
Security5 min read

HashiCorp Vault Essentials

An overview of Vault: architecture, seal and unseal, auth methods, policies, secrets engines, dynamic secrets and leases, Vault Agent, and high-availability storage.

Read the guide →
Security4 min read

Kubernetes security fundamentals

A practical checklist for securing a Kubernetes cluster, from the 4 Cs of cloud native security to secrets encryption, runtime sandboxes, network policies and node hardening.

Read the guide →
Networking4 min read

Cilium and eBPF: Kubernetes networking without iptables

How Cilium uses eBPF for pod networking, identity-based network policy, kube-proxy replacement, encryption and observability with Hubble.

Read the guide →
Networking5 min read

Consul Service Discovery and Mesh

A guide to Consul: server and client agents, service registration and discovery, health checks, the KV store, service mesh with intentions, ACLs, and gossip and TLS encryption.

Read the guide →
Networking4 min read

Istio Service Mesh

Why use a service mesh, how Istio's control and data planes work, traffic management with VirtualService, DestinationRule and Gateway, mTLS, authorization and observability.

Read the guide →
Observability5 min read

OpenTelemetry Explained

A practical overview of OpenTelemetry: signals, API versus SDK, instrumentation, context propagation, baggage, OTLP and the Collector pipeline.

Read the guide →
Observability5 min read

Prometheus Monitoring Basics

How Prometheus scrapes, stores and queries metrics: exporters, metric types, PromQL, recording and alerting rules, Alertmanager routing and securing scrape targets.

Read the guide →
DevOps4 min read

API Testing with Postman

Use Postman collections, variables, environments, authentication and test scripts, then automate runs with the Collection Runner, monitors and Newman in CI.

Read the guide →
DevOps5 min read

Docker From the Ground Up

How Docker works under the hood: images and layers, writing good Dockerfiles, networking, volumes, Compose, and the commands you reach for every day.

Read the guide →
DevOps5 min read

Git Internals and Workflow

Understand Git from the inside out: objects and hashes, commits and branches, merge versus rebase, stash, restore and reset, remotes, pull requests and feature branches.

Read the guide →
DevOps5 min read

GitHub Actions and Workflow Security

How GitHub accounts, authentication, Actions workflows, runners, environments and reusable workflows fit together, plus practical secrets handling and hardening advice.

Read the guide →
DevOps5 min read

Jenkins CI/CD Pipelines

Jenkins explained: controller and agent architecture, freestyle jobs versus pipelines, Jenkinsfile syntax, credentials, triggers, SCM, Ansible and Maven integration, and security.

Read the guide →
DevOps5 min read

Terraform Fundamentals

Core Terraform concepts: the plan and apply workflow, state and remote backends, variables, modules, loops, lifecycle rules, data sources, secrets handling and multiple providers.

Read the guide →
Automation5 min read

Ansible Playbooks and Automation

A practical guide to Ansible: inventory, modules, playbooks, variables, handlers, roles and idempotency, with the commands and patterns used in day-to-day automation.

Read the guide →
Automation5 min read

Argo Workflows and Argo Events

Build container-native pipelines with Argo Workflows templates, steps, DAGs and artifacts, and trigger them from external events using Argo Events sources, sensors and triggers.

Read the guide →
Cloud5 min read

AWS Compute, Storage and Networking Essentials

A concise guide to EC2 purchasing options, EBS, EFS, FSx, S3 storage classes, VPC design, load balancing, Route 53, CloudFront and the main AWS database choices.

Read the guide →
Cloud5 min read

AWS Identity, Accounts and Governance

How AWS regions, IAM, MFA, Organizations, Identity Center and Control Tower fit together to keep multi-account environments secure, governed and observable.

Read the guide →
AI5 min read

AI Infrastructure and GPU Computing

How AI data centers are built: GPUs, CUDA, NCCL collectives, high-speed networking and interconnects, virtualization, and the tools used to monitor GPU fleets.

Read the guide →
AI5 min read

AWS Generative AI Services

A practical overview of Amazon Bedrock, prompt engineering, fine-tuning, RAG, Amazon Q, managed AI services, SageMaker and responsible AI practices on AWS.

Read the guide →
AI5 min read

Azure AI Fundamentals

A practical overview of machine learning basics, Azure Machine Learning, Azure AI services, generative AI with Microsoft Foundry, and responsible AI harm mitigation.

Read the guide →
AI4 min read

LLMs and RAG in plain English

What a large language model actually is, how it differs from older machine learning, and how retrieval-augmented generation (RAG) lets it answer from your own data.

Read the guide →
Data5 min read

Apache Kafka Essentials

Kafka fundamentals: topics and partitions, producer acks, retries and idempotence, consumer groups, brokers and replication, KRaft versus ZooKeeper, Connect and durability.

Read the guide →
Data5 min read

Machine Learning on AWS

From data ingestion with S3, Kinesis, Firehose, MSK and EMR to the SageMaker workflow, evaluation metrics, overfitting, deployment options and safeguards.

Read the guide →